Код:
begin
TerminateProcessByName('c:\program files (x86)\quiknowledge\service\qksvc.exe');
TerminateProcessByName('c:\program files (x86)\edealspop\edealspop.exe');
StopService('BackupStack');
StopService('storegidfilter');
StopService('qknfd');
QuarantineFile('C:\Users\Евгений\AppData\Local\Microsoft\Extensions\safebrowser.exe','');
QuarantineFile('C:\Users\Евгений\AppData\Local\Microsoft\Extensions\extsetup.exe','');
QuarantineFile('C:\Users\Евгений\AppData\Roaming\newSI_20107\s_inst.exe','');
QuarantineFile('C:\Users\Евгений\AppData\Roaming\newSI_1801\s_inst.exe','');
QuarantineFile('C:\Program Files (x86)\Аудио и видео скачивание\IE\x86\Downloader.dll','');
QuarantineFile('C:\Program Files (x86)\Quiknowledge\IE\QuiknowledgeClientIE.dll','');
QuarantineFile('C:\Users\Public\Videos\Adobe\upd.exe','');
QuarantineFile('C:\ProgramData\Schedule\timetasks.exe','');
QuarantineFile('C:\ProgramData\Program status\scheck.exe','');
QuarantineFile('C:\ProgramData\Kbrowser utility\kbrowser-updater-utility.exe','');
QuarantineFile('C:\Program Files (x86)\common files\system\dnet\dnetc.exe','');
QuarantineFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','');
QuarantineFile('C:\Program Files (x86)\MyPC Backup\BackupStack.exe','');
QuarantineFile('C:\Windows\storegidfilter.sys','');
QuarantineFile('C:\Windows\system32\drivers\qknfd.sys','');
QuarantineFile('c:\program files (x86)\quiknowledge\service\qksvc.exe','');
QuarantineFile('c:\program files (x86)\edealspop\edealspop.exe','');
DeleteFile('c:\program files (x86)\quiknowledge\service\qksvc.exe','32');
DeleteFile('C:\Windows\system32\drivers\qknfd.sys','32');
DeleteFile('C:\Windows\storegidfilter.sys','32');
DeleteFile('C:\Program Files (x86)\MyPC Backup\BackupStack.exe','32');
DeleteFile('C:\PROGRA~2\SupTab\SEARCH~1.DLL','32');
DeleteFile('C:\PROGRA~2\SupTab\SEARCH~2.DLL','32');
DeleteFile('C:\Program Files (x86)\Kinoroom Browser\kinoroom-browser.exe','32');
DeleteFile('C:\Program Files (x86)\Ticno\Tabs\Ticno','32');
DeleteFile('C:\Program Files (x86)\Zaxar\ZaxarLoader.exe','32');
DeleteFile('C:\Program Files (x86)\common files\system\dnet\dnetc.exe','32');
DeleteFile('C:\Program Files (x86)\eDealsPop\eDealsPop.exe','32');
DeleteFile('C:\ProgramData\Kbrowser utility\kbrowser-updater-utility.exe','32');
DeleteFile('C:\ProgramData\Program status\scheck.exe','32');
DeleteFile('C:\ProgramData\Schedule\timetasks.exe','32');
DeleteFile('C:\Users\Public\Videos\Adobe\upd.exe','32');
DeleteFile('C:\Program Files (x86)\punto.bat','32');
DeleteFile('C:\Users\Евгений\AppData\Local\ok.bat','32');
DeleteFile('C:\Users\Евгений\AppData\Local\storegid\storegid.exe','32');
DeleteFile('C:\Users\Евгений\AppData\Local\storegid\storegidup.exe','32');
DeleteFile('C:\Users\Евгений\AppData\Local\vk.bat','32');
DeleteFile('C:\Users\Евгений\AppData\Roaming\eTranslator\eTranslator.exe','32');
DeleteFile('C:\Program Files (x86)\Quiknowledge\IE\QuiknowledgeClientIE.dll','32');
DeleteFile('C:\Program Files (x86)\Аудио и видео скачивание\IE\x86\Downloader.dll','32');
DeleteFile('C:\Windows\Tasks\AmiUpdXp.job','64');
DeleteFile('C:\Windows\Tasks\At1.job','64');
DeleteFile('C:\Users\Евгений\AppData\Roaming\newSI_1801\s_inst.exe','32');
DeleteFile('C:\Windows\Tasks\newSI_1801.job','64');
DeleteFile('C:\Users\Евгений\AppData\Roaming\newSI_20107\s_inst.exe','32');
DeleteFile('C:\Windows\Tasks\newSI_20107.job','64');
DeleteFile('C:\Windows\system32\Tasks\AmiUpdXp','64');
DeleteFile('C:\Windows\system32\Tasks\At1','64');
DeleteFile('C:\Users\Евгений\AppData\Local\Microsoft\Extensions\extsetup.exe','32');
DeleteFile('C:\Windows\system32\Tasks\extsetup','64');
DeleteFile('C:\Windows\system32\Tasks\kbrowser-updater-utility','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_1801','64');
DeleteFile('C:\Windows\system32\Tasks\newSI_20107','64');
DeleteFile('C:\Users\Евгений\AppData\Local\Microsoft\Extensions\safebrowser.exe','32');
DeleteFile('C:\Windows\system32\Tasks\Safebrowser','64');
DelBHO('{0633EE93-D776-472f-A0FF-E1416B8B2E3D}');
DelBHO('{bc8c4384-d19c-474b-a298-c90b7e5c5204}');
DelBHO('{8984B388-A5BB-4DF7-B274-77B879E179DB}');
DelBHO('{57FC7EA7-2F0D-4F3E-89BB-A1651B3F39AA}');
DelBHO('{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}');
DelBHO('{323C6E6D-1621-470F-8A52-4FDEC4E75E40}');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MobileDocuments','command');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','mobilegeni daemon');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ZaxarLoader','command');
RegKeyStrParamWrite('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings', 'ProxyServer', '');
RegKeyParamWrite('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings', 'ProxyEnable', 'REG_DWORD', '0');
DeleteService('WindowsProtectManger');
DeleteService('ProtectMonitor');
DeleteService('PirritDesktop');
DeleteService('NativeRepositorySprite.exe');
DeleteService('IePluginServices');
DeleteService('GamesRS');
DeleteService('DebugDirectXRepository.exe');
DeleteService('BackupStack');
DeleteService('BackupScreenshotSoftware.exe');
DeleteService('ArchiveBIOSExport.exe');
DeleteService('AppGNUPerl.exe');
DeleteService('APIDefaultFreeware.exe');
DeleteService('a95c9c1391dbe6a.exe');
DeleteService('68abedd63fd8292.exe');
DeleteService('2923cf9482865aef91b5ac8319f54cd2.exe');
DeleteService('0b63e187d0b0756.exe');
DeleteService('storegidfilter');
DeleteService('qknfd');
DeleteFileMask('C:\Users\Евгений\AppData\Local\Microsoft\Extensions','*',true);
DeleteFileMask('C:\Users\Евгений\AppData\Roaming\newSI_20107','*',true);
DeleteFileMask('C:\Users\Евгений\AppData\Roaming\newSI_1801','*',true);
DeleteFileMask('C:\Users\Public\Videos\Adobe','*',true);
DeleteFileMask('C:\ProgramData\Schedule','*',true);
DeleteFileMask('C:\ProgramData\Program status','*',true);
DeleteFileMask('C:\ProgramData\Kbrowser utility','*',true);
DeleteFileMask('C:\Program Files (x86)\eDealsPop','*',true);
DeleteFileMask('C:\Program Files (x86)\common files\system\dnet','*',true);
DeleteFileMask('C:\Program Files (x86)\Zaxar','*',true);
DeleteFileMask('C:\Program Files (x86)\Аудио и видео скачивание','*',true);
DeleteFileMask('C:\Program Files (x86)\MyPC Backup','*',true);
DeleteFileMask('C:\Users\Евгений\AppData\Roaming\eTranslator','*',true);
DeleteFileMask('C:\Users\Евгений\AppData\Local\storegid','*',true);
DeleteFileMask('c:\program files (x86)\quiknowledge','*',true);
DeleteDirectory('C:\Users\Евгений\AppData\Local\Microsoft\Extensions');
DeleteDirectory('C:\Users\Евгений\AppData\Roaming\newSI_20107');
DeleteDirectory('C:\Users\Евгений\AppData\Roaming\newSI_1801');
DeleteDirectory('C:\Users\Public\Videos\Adobe');
DeleteDirectory('C:\ProgramData\Schedule');
DeleteDirectory('C:\ProgramData\Program status');
DeleteDirectory('C:\ProgramData\Kbrowser utility');
DeleteDirectory('C:\Program Files (x86)\eDealsPop');
DeleteDirectory('C:\Program Files (x86)\common files\system\dnet');
DeleteDirectory('C:\Program Files (x86)\Zaxar');
DeleteDirectory('C:\Program Files (x86)\Аудио и видео скачивание');
DeleteDirectory('C:\Program Files (x86)\MyPC Backup');
DeleteDirectory('C:\Users\Евгений\AppData\Roaming\eTranslator');
DeleteDirectory('C:\Users\Евгений\AppData\Local\storegid');
DeleteDirectory('c:\program files (x86)\quiknowledge');
ClearHostsFile;
ExecuteSysClean;
ExecuteRepair(3);
ExecuteRepair(4);
ExecuteRepair(2);
ExecuteWizard('SCU',2,2,true);
RebootWindows(true);
end.
Компьютер перезагрузится.